Which of the following describes the most likely risk for a company developing a privacy policy with standards that are much higher than its competitors?

• A.Attracting skepticism from auditors
• B.Being more closely scrutinized for any breaches of policy
• C.Getting accused of discriminatory practices
• D.Having a security system failure

Comment: *

Name: *

Email: *

Verification: *

If an organization certified under Privacy Shield wants to transfer personal data to a third party acting as an agent, the organization must ensure the third party does all of the following EXCEPT?

• A.Enters a contract with the organization that states the third party will process data according to the consent agreement
• B.Provides the same level of privacy protection as the organization
• C.Uses the transferred data for limited purposes
• D.Notifies the organization if it can no longer meet its requirements for proper data handling

Comment: *

Name: *

Email: *

Verification: *

When may a financial institution share consumer information with non-affiliated third parties for marketing purposes?

• A.After disclosing information-sharing practices to customers and after giving them an opportunity to opt in.
• B.After disclosing information-sharing practices to customers and after giving them an opportunity to opt out.
• C.After disclosing marketing practices to customers and after giving them an opportunity to opt in.
• D.After disclosing marketing practices to customers and after giving them an opportunity to opt out.

Comment: *

Name: *

Email: *

Verification: *

The Family Educational Rights and Privacy Act (FERPA) requires schools to do all of the following EXCEPT?

• A.Verify the identity of students who make requests for access to their records.
• B.Provide students with access to their records within a specified amount of time.
• C.Obtain student authorization before releasing directory information in their records.
• D.Respond to all reasonable student requests regarding explanation of their records.

Comment: *

Name: *

Email: *

Verification: *

Privacy Is Hiring Inc., a CA-based company, is an online specialty recruiting firm focusing on placing privacy professionals in roles at major companies. Job candidates create online profiles outlining their experience and credentials, and can pay $19.99/month via credit card to have their profiles promoted to potential employers. Privacy Is Hiring Inc. keeps all customer data at rest encrypted on its servers.
Under what circumstances would Privacy Is Hiring Inc., need to notify affected individuals in the event of a data breach?

• A.If the personal information stolen included the individuals' names and credit card pin numbers.
• B.If Privacy Is Hiring Inc., reasonably believes that job candidates will be harmed by the data breach.
• C.If law enforcement has completed its investigation and has authorized Privacy Is Hiring Inc. to provide the notification to clients and applicable regulators.
• D.If the job candidates' credit card information and the encryption keys were among the information taken.

Comment: *

Name: *

Email: *

Verification: *